90003β€”Sub Resource Integrity Attribute Missing

PUBLISHEDsecurity alertMedium
Passive

Metadata

Alert ID:
90003
Risk:
Medium
Type:
Passive

Summary

The integrity attribute is missing on a script or link tag served by an external server. The integrity tag prevents an attacker who have gained access to this server from injecting a malicious content.

Solution

Provide a valid integrity attribute to the tag.

Other info

The following hash was calculated (using base64 encoding of the output of the hash algorithm: SHA-384) for the script in question sha384-PJww2fZl501RXIQpYNSkUcg6ASX9Pec5LXs3IxrxDHLqWK7fzfiaV2W/kCr5Ps8G

References